fetch-page-assets

DPRK malware came back in the next release of fetch-page-assets after npm's June takedown

OpenSourceMalware counted 4,367 infected repositories across 2,152 GitHub owners in July, and traced one maintainer through five months of advisory, cleanup and reinfection while the trigger sat in editor config.